Skip to content
OpenAdvisories
High · 8.7 CVE-2024-41724 EUVD-2024-54202GHSA-jcg6-gqfh-q5rq

Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration allowed an attacker to spoof the SALTO server. …

Published Mar 10, 2025 · Updated Mar 10, 2025 · Assigned by Gallagher

Description

Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration allowed an attacker to spoof the SALTO server.

This issue affects all versions of Gallagher Command Centre prior to 9.20.1043.

Affected products

VendorProductAffectedFixed
Gallagher Command Centre Server < 9.20.1043 9.20.1043

References